Skip to content

Conversation

@fdesbiens
Copy link
Contributor

No description provided.

rahmanih and others added 18 commits November 20, 2025 18:14
…cursion

- Add a partition entry counter (ux_host_class_storage_mounted_partitions_count)
   and a configurable maximum (UX_HOST_CLASS_STORAGE_MAX_PARTITIONS_COUNT) to limit
   the number of partition entries processed during mounting.

- Counter is incremented for every partition entry, and checked both before and during the partition parsing loop.
- If the limit is exceeded, the function aborts and returns UX_HOST_CLASS_STORAGE_ERROR_MEDIA_NOT_READ.
- This prevents stack overflow and infinite recursion in case of malformed or cyclic MBR/EBR partition tables.
- Default partition entry limit set to 8 by default for safety and compatibility with typical devices.

Fixes CVE-2025-55095

Signed-off-by: Haithem Rahmani <haithem.rahmani@st.com>
Add usbx device hid mouse rtos and standalone demo.
fix typo ALIGNMENT -> ALIGNMENT
expose UX_ENABLE_DEBUG_LOG  option in ux_user_sample.h
Add check for optional device hid out endpoint
…log_enabled

Improvement of UX_ENABLE_DEBUG_LOG  option
Use the UX prefix instead of TX to avoid a compilation issue in standalone mode
Terminate the hid host interrupt out endpoint on deactivate
fix (host/storage): prevent stack overflow from infinite partition recursion
@fdesbiens fdesbiens merged commit 83e508f into master Jan 12, 2026
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants